Legal
Privacy policy
What we collect through this site, why we collect it, where it lives, and how to ask us about it — in plain language.
Last updated: July 27, 2026
Overview
DarcStar Technologies operates this website from the United States. We collect only the information you choose to share through the forms on this site, plus the minimal technical data needed to keep the site secure. We don't run advertising, we don't use third-party analytics or tracking cookies, and we never sell personal information. This policy covers darcstar.tech — if anything here is unclear, email us at the address at the bottom of this page.
What we collect
Everything below is volunteered by you, except the security data noted last.
Contact form
Your name, email address, message, and — if you choose to add them — your company and area of interest. We use these to read and respond to your message.
Waitlist
Your name and email address, plus optional details you can add: your organization, your country or region, and whether you want occasional product and research updates. If you continue past the signup, the short optional questions also record your role, primary application and evaluation timeline — and, for commercial or operational use cases, how you address the problem today, rough ranges for the annual value and budget involved, and what evidence you would need before adopting. The last step records either whether you would consider a paid evaluation, a short description of the deployment you have in mind, whether we may contact you directly, and how (including a phone number if you choose to give one) — or, if you are following the work rather than evaluating it, which kinds of update you would like to receive. We use these to manage early access and to prioritize evaluations. The value and budget answers are for our internal prioritization only: we never show them back to you and we never publish them.
Accounts
Your name, email address, and a password when you create an account. The password is stored only as a salted hash — we can't read it. Sign-up is protected by Cloudflare Turnstile, which may process technical signals from your browser to tell humans from bots. Once you verify your email, contact messages sent from that same address — including ones sent before you signed up — are linked to your account so you can see them on your account page.
Security & technical data
To protect the site we record the IP address and browser user-agent of sign-in attempts, and each contact or waitlist submission is stored with your browser's user-agent and a shortened hash of your IP address, which we use to rate-limit abuse. The only cookies the site sets are essential ones: the cookie that keeps you signed in, and — once you start the waitlist signup — a cookie that remembers which step of that form you reached, so reloading the page doesn't send you back to the beginning. It expires within a day, we never share it, and you can clear it at any time with the “Start a new signup” link on the form. There are no advertising or analytics cookies, and your language preference lives in the page address, not a cookie.
How we use it
We use your information to respond to messages, run the early-access waitlist, operate your account, and keep the site secure. We contact you only about things you asked for — a reply, a waitlist invite, account emails like verification and password resets. There is no marketing list unless you joined the waitlist, and waitlist email is only about early access.
Where it lives
We don't sell or share personal information for marketing. A small set of infrastructure providers process it on our behalf:
Cloudflare
Hosts and serves the site, provides security features (including the Turnstile bot check), and briefly processes request data like IP addresses in operational logs.
Turso
The database where form submissions, waitlist entries, accounts, and security logs are stored.
Resend
Delivers our transactional email — contact acknowledgements, waitlist notifications, verification and password-reset messages.
Sanity
Manages the site's published content (news, research, team pages). It never receives anything you submit through a form.
How long we keep it
Contact messages and waitlist entries are kept while they're relevant — until we've handled the conversation or the early-access program they belong to has run its course. Account data is kept while your account exists. Security logs have no automatic expiry today; we keep them for investigating abuse. You can ask us to delete any of it — including log entries about you — at any time.
Your choices
You can ask what we hold about you, ask us to correct it, or ask us to delete it. Email us from the address in question and we'll act on it promptly. If you have an account, you can also update your details or change your password yourself from your account page.
Security
The site is served only over HTTPS, passwords are stored as salted hashes, access to stored data is limited to the people who need it to run the site, and admin surfaces sit behind authentication and rate limiting. No system is perfectly secure, but we keep the amount of data we hold deliberately small.
Children
This site is aimed at professionals and isn't directed at children under 13. We don't knowingly collect their information; if you believe a child has submitted personal data, contact us and we'll delete it.
Changes to this policy
If we change how we handle personal information, we'll update this page and its date. Significant changes will be called out on the page itself.
Contact
For privacy questions or data requests, reach us at: